Privacy Policy - DivestWorld

DivestWorld is an online platform based in India that connects business sellers, business buyers, franchisors, franchisees, startup founders, and investors. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It applies to every visitor to divestworld.com and every registered user of our services.

We are committed to protecting your information and to processing it lawfully. This policy is published in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023.

By creating an account or continuing to use DivestWorld, you confirm that you have read this policy and consent to the practices described in it.

1. Information We Collect

Information you provide directly.

Account details: your name, email address, mobile number, role on the platform, city, and chosen password.
Profile information: profile photo, bio, and business or professional details.
Verification documents: PAN card, government-issued identification, business registration certificates, GST documents, and other Know Your Customer records requested during onboarding.
Listing content: details of any business, franchise, or startup you list, including financial figures, photographs, prospectus documents, and supporting files.
Transaction information: offers, inquiries, messages exchanged with other users, subscription selections, and payment details processed through our payment partner.
Communications: emails, contact-form submissions, support tickets, and conversations conducted on the platform.

Information we collect automatically when you use the platform.

Internet Protocol address, device type, browser version, and operating system.
Pages visited, timestamps, search queries, and listings viewed.
Cookies and similar technologies, as described in Section 6.
Log data and security events such as failed login attempts.

Information from third parties.

Payment confirmation data from our payment processor.
Email and one-time password delivery status from our communication providers.
Fraud prevention signals from security services we may engage.

2. How We Use Your Information

To create and manage your account, verify your identity, and provide platform features.
To facilitate communication, offers, and transactions between you and other users.
To process subscription payments and commission settlements.
To send transactional emails and SMS, including account confirmations, one-time passwords, deal updates, payment receipts, and security alerts.
To moderate listings and enforce our Terms and Conditions.
To prevent fraud, abuse, money laundering, and unauthorised access.
To respond to support requests and resolve disputes.
To comply with legal obligations, court orders, and lawful requests from authorities.
To improve the platform by analysing aggregate usage patterns and designing better features.
To send service-related announcements. Marketing communications are sent only with your separate consent and you may opt out at any time.

3. Lawful Basis for Processing

Under the Digital Personal Data Protection Act, 2023, we process your personal data on one or more of the following bases.

Consent. You provide consent at registration and through specific actions, such as uploading verification documents.
Performance of contract. Processing is necessary to deliver the services you have signed up for.
Legitimate uses permitted under the Act, including fraud prevention and platform security.
Legal obligation. Compliance with Indian law, taxation requirements, and lawful directions from authorities.

You may withdraw consent at any time by writing to support@divestworld.com. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal and may affect our ability to continue providing services to you.

4. How We Share Your Information

We do not sell your personal information. We share it only in the circumstances listed below.

With other users. Listing details and contact information are visible to other registered users when you list a business, send an inquiry, or accept an offer. You control what appears on your public profile and listings.
Service providers. Companies that help us operate the platform under contractual confidentiality obligations: Razorpay for payment processing, Hostinger for hosting and email infrastructure, Fast2SMS for OTP and SMS delivery, and similar providers we may engage from time to time.
Professional advisors. Lawyers, accountants, and auditors bound by professional confidentiality.
Legal authorities. Where required by law, court order, or a valid legal request from Indian government or law-enforcement agencies.
Business transfers. If DivestWorld is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you in advance, and your rights under this policy will be preserved.

5. Data Storage and International Transfers

Your data is stored on servers operated by Hostinger and is hosted in or accessible from India. Some of our service providers may store data on servers outside India. When data is transferred internationally, we apply safeguards consistent with applicable Indian law.

6. Cookies and Similar Technologies

We use cookies and similar technologies for essential platform functions.

Session cookies keep you signed in.
Security cookies help us detect suspicious activity.
Preference cookies remember settings such as “remember me”.

You can disable cookies in your browser settings, but some platform features may not work correctly without them. We do not currently use cookies for behavioural advertising.

7. Data Retention

Account data. Until you delete your account, plus up to 90 days of backup retention.
Transaction and tax records. At least eight (8) years, as required under Indian tax laws.
Communications and support tickets. Up to three (3) years from your last activity.
Verification documents. Until your account is deleted, after which they are securely destroyed unless we are legally required to retain them.

8. Data Security

We use industry-standard measures to protect your information.

HTTPS encryption for all data in transit.
Password hashing using bcrypt; we cannot read your password.
Access controls so that only authorised personnel can access user data on a need-to-know basis.
Rate limiting and monitoring to detect suspicious access attempts.
Secure payment processing through Razorpay; we do not store your full card or banking details.

No system is perfectly secure. If you believe your account has been compromised, contact support@divestworld.com immediately.

9. Your Rights

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

Access and obtain a copy of your personal data.
Correct or update inaccurate or incomplete data.
Request erasure of your data, subject to our legal retention obligations.
Withdraw any consent you have given.
Nominate another person to exercise your rights in the event of your death or incapacity.
Lodge a complaint with the Data Protection Board of India.

To exercise any of these rights, email support@divestworld.com from your registered email address. We will respond within thirty (30) days. We may require identity verification before acting on a request.

10. Children's Information

DivestWorld is intended for users aged eighteen (18) years and above. We do not knowingly collect personal information from minors. If we discover that we have collected information from a minor, we will delete it promptly. If you are a parent or guardian and believe your child has provided us information, write to support@divestworld.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when the most recent changes took effect. We will notify you of material changes by email or through a prominent notice on the platform. Continued use of DivestWorld after changes take effect constitutes acceptance of the revised policy.

12. Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, our Grievance Officer's contact details are as follows.

Name: Deepak Kumar.
Designation: Grievance Officer, DivestWorld.
Email: divestworld@gmail.com.
Phone: +91 78279 07475.
Office hours: Monday to Friday, 10:00 AM to 6:00 PM IST, excluding public holidays.

We acknowledge complaints within 24 hours and resolve them within 15 days from the date of receipt, in accordance with the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

13. Contact Us

For any questions about this Privacy Policy or our data practices, reach us at:

Email: support@divestworld.com.
Phone: +91 78279 07475.